Identity - 1

2026 (4)

May (1)

security: Defense in depth for autonomous AI agents

Microsoft Security Blog

2026-05-14

Microsoft says autonomous AI agents require updated defense-in-depth controls centered on application-layer design, identity, and human oversight. The post frames agent security as an evolution of existing defense-in-depth practices rather than a new model.

March (2)

security: OAuth redirection abuse enables phishing and malware delivery

Microsoft Security Blog

2026-03-02

Microsoft reports attackers abusing OAuth redirect behavior to move users from legitimate sign-in pages to attacker-controlled sites, enabling phishing and malware delivery via trusted authentication flows.

github: Copilot metrics reports now return consistent usernames for Enterprise Managed Users

GitHub

2026-03-02

Copilot usage metrics reports now return a consistent `user_login` value for Enterprise Managed Users. This addresses cases where reports previously included a suffixed `user_login`, complicating analysis.

February (1)

security: Running OpenClaw safely: identity, isolation, and runtime risk

Microsoft Security Blog

2026-02-19

Microsoft Security Blog outlines risks of self-hosted agent runtimes (like OpenClaw) that execute untrusted input while holding long-lived credentials, creating compounded supply-chain exposure. It emphasizes governance plus identity controls and runtime isolation to reduce credential and execution risk in enterprise deployments.